Bugtraq mailing list archives

Re: Reachable addresses on the net (was SYN floods)


From: oxymoron () waste org (Oliver Xymoron)
Date: Tue, 3 Sep 1996 10:05:54 -0500


On Tue, 3 Sep 1996, Todd Vierling wrote:

On Sat, 31 Aug 1996, Oliver Xymoron wrote:

: As you can see, the address space is still quite sparse (less than 1 out
: of every 200 addresses is reachable in my test), with most being inside
: the 127 net.

Think about the 127 net for a while.  Most systems have a route
'127.0.0.0/255.0.0.0' pointing at the local host, right?  Where does
127.0.0.1 go?

Yep, I'm well aware that 127 is the loopback net (though I'm sure a dozen
more people will point it out to me before the end of the day :).. I was
just looking at the probability that a random 32 bit (the simplest
possible way to generate a spoofing address) address would be reachable.
By my measure, the most straightforward method of generating addresses
should prove quite effective. If I filter out addresses on nets 0, 10,
127, 192.168, and 248-255, I get about .113%. This was not intended to be
an accurate measure of the number of real sites, just how many addresses
were "reachable."

--
 "Love the dolphins," she advised him. "Write by W.A.S.T.E.."



Current thread: